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© A method is disclosed for restricting the delivery 
and receipt of electronic messages which are deliv- 
ered to selected recipients via a computer network. 
Each individual message or individual component of 
a multiple component electronic message is trans- 
mitted in association with an electronic message 
profile which may include restrictions designated by 
the transmitter with respect to the recipient's secu- 
rity classification, management level, or address. 
Preferably the electronic message profile will also 
include identifying information with regard to the 
source and type of message associated therewith. 
Each electronic message profile is then used to 
automatically control the delivery and receipt of its 
associated electronic message by comparison with a 
recipient profile which was previously established. In 
this manner a transmitter may specify that delivery 
of a selected electronic message or selected compo- 
nent of an electronic message should be automati- 
cally cancelled unless the recipient meets a speci- 
fied security clearance, management level, or other 
criteria. Similarly, a recipient may select a profile 
which precludes receipt of any electronic message 
from a particular source or of a particular type. 
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RESTRICTING ELECTRONIC MESSAGE TRAFFIC 



This invention relates generally to restricting 
electronic message traffic in computer networks 
and in particular to methods for restricting the 
delivery and receipt of electronic messages trans- 
mitted to selected recipients via computer net- 
works. 

Electronic mail is rapidly supplanting Post Of- 
fice mail as a means for communicating between 
individuals. One significant advantage of electronic 
mail is that the transmission time associated with 
each electronic mail message is ordinarily only 
seconds, or fractions of a second, as compared to 
Post Office mail which ordinarily requires several 
days. 

The mailing time associated with Post Office 
mail often causes significant delay in the conduct 
of business and has been largely ignored, and 
consequently tolerated, until the advent of Express 
Mail services and electronic mail. Currently, this 
widespread delay of business is identified as 
"float" and the minimising or eliminating of this 
float has become one goal of business managers, 
efficiency experts and others hoping to increase 
societal productivity. 

The widespread use of electronic mail systems 
have given rise to a problem of security. That is, 
the worrisome problem of delivering a sensitive 
electronic mail message to the terminal of a third 
party only to have that message intercepted and 
read by another due to the lack of sufficient secu- 
rity at the recipient's terminal. Additionally, as elec- 
tronic mail services have become more common, it 
may be likely that a particular recipient may be- 
come inundated with unwanted or insignificant 
messages to the point where important electronic 
messages are lost due to insufficient storage capa- 
bility at the recipients terminal. 

Thus, it should be obvious that a need exists 
for a method whereby the delivery and receipt of 
sensitive electronic messages may be carefully re- 
stricted while permitting a recipient to easily control 
the receipt of messages by setting a pre-estab- 
lished criterion for delivery. 

It is therefore one object of the present inven- 
tion to provide an improved electronic message 
system. 

The present invention provides a method for 
restricting the delivery and receipt of electronic 
messages, presumed unitary, or message compo- 
nents, in the case of multi-component messages, 
transmitted to selected recipients via a computer 
network, comprising the steps of: 
transmitting an electronic message profile in asso- 
ciation with each electronic message/message 
component transmitted via the computer network; 



and 

automatically controlling the delivery and receipt of 
each electronic message/message component in 
response to the associated electronic message 
5 profile. 

Such an arrangement is thought to provide an 
improved electronic message system which per- 
mits restriction of the delivery and receipt of sen- 
sitive electronic messages as by enabling a recipi- 
10 ent to restrict the type and number of electronic 
messages which may be delivered to his or her 
terminal. 

In one such disclosed arrangement, each in- 
dividual electronic message or individual compo- 

15 nent of a multiple component electronic message 
is transmitted in association with an electronic mes- 
sage profile which may include restrictions des- 
ignated by the transmitter with regard to the recipi- 
ents security classification, management level or 

20 address. Preferably the electronic message profile 
will also include identifying information with regard 
to the source and the type of message associated 
therewith. Each electronic message profile is then 
used to automatically control the delivery and re- 

25 ceipt of its associated electronic message by com- 
parison with a recipient profile which was pre- 
viously established. In this manner, a transmitter 
may specify that delivery of a selected electronic 
message should be automatically cancelled unless 

30 the recipient meets a specified security clearance, 
management level or other criterion. Similarly, a 
recipient may select a profile which precludes re- 
ceipt of any electronic message which does not 
meet the previously established criterion for that 

35 recipient. 

The present invention will be described further 
by way of example with reference to an embodi- 
ment thereof as illustrated in the accompanying 
drawings, in which: 

40 Figure 1 is a block diagram of a Local Area 

Network (LAN) which links multiple users in a sys- 
tem wherein electronic messages may be transmit- 
ted; 

Figure 2 is a logic flow chart illustrating the 
45 operation of the arrangement at the transmission 
system; and 

Figure 3 is a logic flow chart illustrating the 
operation of the arrangement at the reception sys- 
tem. 

so With reference now to the figures and in par- 
ticular with reference to Figure 1, a Local Area 
Network (LAN) 10, which is a self-contained com- 
puter network, links a plurality of users. As is 
illustrated, Users A, B, C, and D are each linked in 
Local Area Network (LAN) 10 and are capable of 
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freely communicating electronic message between 
one another within Local Area Network (LAN) 10. 
Those skilled in the art will appreciate that while a 
Local Area Network (LAN) is depicted in Figure 1 
the electronic message method disclosed herein 
may be used with other such systems such as a 
plurality of interactive work stations which are each 
coupled to a host computer. 

The operation of the disclosed arrangement 
permits a transmitter to restrict the delivery and 
receipt of selected electronic messages to a par- 
ticular recipient only after verifying that the profile 
of that recipient meets certain criterion established 
for that particular message. It also permits a recipi- 
ent of electronic mail to selectively determine the 
type and nature of electronic messages which may 
be received at his or her location. The operation, as 
a whole, may be regarded as a set of steps, some 
of which may be thought of as occurring at a 
"transmission system" (see Figure 2) and some of 
which may be thought of as occurring at a 
"reception system" (see Figure 3). Together, Fig- 
ures 2 and 3 indicate one way whereby the deliv- 
ery and receipt of electronic messages within a 
computer network may be restricted and controlled 
from both the transmission and reception systems. 
Additionally, each user depicted in Figure 1 may 
consist of an individual, or a computer system, 
such as a personal computer. 

Referring now to Figure 2, as depicted in block 
14, the disclosed operation begins by the selection 
of a particular message for transmission. Those 
skilled in the art will appreciate that the selection of 
a particular message for transmission involves not 
only the selection of the message content but also 
the specification of the recipient or recipients for 
that particular message. Therefore, the selection 
depicted in block 14 shall be assumed to include 
such specifications. Next, block 16 is used to illus- 
trate whether or not a delivery restriction is re- 
quired. If not, the particular message selected is 
transmitted via Local Area Network (LAN) 10 (see 
Figure 1) in a manner well known in the prior art, 
as illustrated in block 18. 

In the event a delivery restriction for a particu- 
lar message has been required, as determined by 
block 16, then block 20 is used to illustrate the 
determination of whether or not the message in 
question is a single component message. If the 
message selected for transmission with delivery 
restrictions is a single component message, then 
block 22 is used to illustrate the selection of the 
delivery/receipt restrictions for that message. 
Thereafter, the message is transmitted via Local 
Area Network (LAN) 10 with an associated restric- 
tion profile, as depicted in block 30. 

In the event the message selected for trans- 
mission with restriction is not a single component 



message, as determined by block 20, then block 
24 is used to illustrate a determination of whether 
or not individual components of the message are to 
be restricted. If no individual component of the 

5 message requires separate restriction, then the 
delivery/receipt restrictions which are necessary 
are selected, as described above with respect to 
block 22 and the message is transmitted along with 
its associated restriction profile, as illustrated in 

10 block 30. 

However, in the event the transmitter desires to 
restrict individual components within the selected 
message, as determined by block 24, then block 
26 illustrates the selection of these individual com- 

15 ponents for restriction. Next, block 28 depicts the 
selection of delivery/receipt restrictions for each 
individual component within the selected message, 
as desired by the transmitter. Thereafter the mul- 
tiple component message is transmitted along with 

20 its associated restriction profile, as illustrated in 
block 30. 

At the recipient system, the disclosed opera- 
tion begins with the receipt of a particular message 
thereat, as illustrated in block 40. 

25 Next, block 42 depicts the retrieval of the re- 

cipient's profile. The recipient's profile may include 
such information as the security clearance ievel of 
the recipient, the management level of the recipi- 
ent, the recipient's address, information regarding 

30 whether or not the recipient has an affiliated user 
who has access to the recipient's electronic mes- 
sages or, as specifically disclosed, information re- 
garding whether or not the recipient desires to 
restrict the receipt of electronic messages at his 

35 system to messages which meet a particular cri- 
terion which the recipient has set. 

Block 44 now illustrates a determination of 
whether or not any restrictions exist on the delivery 
or receipt of this particular message. It should be 

40 noted that such restrictions may be contained with- 
in the restriction profile associated with the particu- 
lar message or may be generated as a result of the 
recipient profile which has been stored at the re- 
cipient's system. If no restrictions exist for delivery 

45 or receipt of this particular message, the message 
is placed within the recipient's electronic mail box, 
as depicted in block 46. 

In the event there exist restrictions on the de- 
livery or receipt of a particular electronic message 

50 then block 48 is used to determine whether or not 
the entire message is restricted. If the entire mes- 
sage is restricted, then block 50 depicts the deter- 
mination of whether or not the restrictions con- 
tained within the message or the recipient's profile 

55 match this particular message. If not, as above, the 
message is placed within the recipient's electronic 
mail box, as illustrated in block 46. 

In the event the restrictions contained within 
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the associated restriction profile associated with the 
message, match the recipient's profile, or if the 
restrictions contained within the recipients profile 
match the message data, then block 54 illustrates 
the cancellation of delivery or receipt of that mes- 
sage and block 56 depicts the deletion of that 
message from the network. 

Returning again to block 48, if a determination 
has been made that the entire message is not 
restricted, then block 52 illustrates an examination 
of each component within the message. Block 58 
illustrates a determination of whether or not a re- 
striction exists for a particular component within the 
message. If not, this determination is repeated for 
each component within a multiple component mes- 
sage, as illustrated by the logic flow chart of Figure 
3. 

In the event there exists a restriction for a 
particular component within the multiple component 
message which has been received, then block 60 
is used to depict a determination of whether or not 
the restrictions for that component match either the 
recipient's profile or the associated restriction pro- 
file which has been transmitted with the message. 
If the restrictions do not match either profile then 
the component is placed within the recipient's mail 
box, as illustrated by block 62, and the process 
returns to block 52 to examine a subsequent com- 
ponent of the message. 

However, in the event the component restric- 
tions match the profile contained within recipient's 
profile, or the restrictions contained with the recipi- 
ent's profile match the message data, then block 
64 illustrates the cancellation of delivery or receipt 
of that particular component and block 66 illus- 
trates the deletion of that component from the 
network. Finally, the process returns again to block 
52 to continue to examine components of the re- 
ceived message until such time as each compo- 
nent has been examined. 

As those skilled in the art will appreciate, by 
using such an arrangement a predetermined deliv- 
ery criterion may be established for each electronic 
message transmitted within an electronic computer 
network so that delivery of that message or individ- 
ual component of that message may be automati- 
cally cancelled upon the failure of the recipient to 
meet such criteria. Further, by using a similar tech- 
nique a recipient may easily restrict the type and 
number of electronic messages which he or she 
will permit to be placed within his or her electronic 
mail box, thus preserving memory space and the 
amount of time necessary to review electronic mail. 

Co-pending application (AT9-88-030) relates 

to similar subject matter. 



1. A method for restricting the delivery and 
receipt of electronic messages or message compo- 
nents, in the case of multi-component messages, 

5 transmitted to selected recipients via a computer 
network, comprising the steps of: 
transmitting an electronic message profile in asso- 
ciation with each electronic message/message 
component transmitted via the computer network; 

70 and 

automatically controlling the delivery and receipt of 
each electronic message/message component in 
response to the associated electronic message 
profile. 

75 2. A method as claimed in Claim 1, further 

including the step of generating a recipient profile 
for each recipient within the computer network. 

3. A method as claimed in Claim 2, wherein the 
step of automatically controlling the delivery and 

20 receipt of each electronic message/message com- 
ponent in response to the associated electronic 
message profile comprises the step of comparing 
the electronic message profile with the recipient 
profile and automatically cancelling delivery and 

25 receipt of an electronic message/message compo- 
nent in response to variations therebetween. 

4. A method as claimed in Claim 2 or Claim 3, 
wherein the step of generating a recipient profile 
for each recipient within the computer network 

30 comprises the step of specifying for each recipient 
a selected class of electronic messages/message 
components for which delivery and receipt will be 
automatically cancelled. 

5. A method as claimed in any of Claims 2 to 
35 4, wherein the step of generating a recipient profile 

for each recipient within the computer network 
comprises the step of specifying a security clas- 
sification for each recipient wherein delivery and 
receipt of an electronic message/message compo- 
40 nent having an electronic message profile indicat- 
ing a higher security classification will be automati- 
cally cancelled. 

6. A method as claimed in any of Claims 2 to 
5, wherein the step of generating a recipient profile 

45 for each recipient within the computer network 
comprises the step of specifying the management 
level of each recipient wherein delivery and receipt 
of an electronic message profile indicating an in- 
consistent management level will be automatically 

50 cancelled. 
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